Senior Information Security Consultant

Jersey · Permanent

Our client provides virtual CISO (vCISO) and information security consultancy services to organisations across the Channel Islands. They are looking for a Senior Information Security Consultant to act as the vCISO lead across a portfolio of client engagements — combining hands-on technical assurance with strategic advisory work, board-level reporting, and long-term client relationship management.

Key Responsibilities

  • Act as the named vCISO lead for a portfolio of clients, owning delivery against agreed Statements of Work
  • Lead compliance monitoring and certification against Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, ISO 27001, and relevant regulatory frameworks
  • Build and maintain client ISMS documentation — policies, procedures, risk assessments, and asset registers
  • Review and monitor technical security controls including firewalls, endpoint protection, identity and access management, and vulnerability management
  • Produce and present quarterly board reports, translating technical risk into commercial and regulatory language
  • Facilitate incident response tabletop exercises and deliver security awareness training
  • Conduct vendor and supplier due diligence and support clients with third-party assurance requests
  • Mentor junior consultants and contribute to the improvement of service delivery standards

Essential Skills & Experience

  • Minimum five years' experience in information or cyber security, with at least two years in a consultancy, vCISO, or senior in-house security role
  • Proven experience delivering against recognised frameworks — Cyber Essentials, ISO 27001, NIST CSF, or equivalent
  • Strong knowledge of technical security controls across firewalls, endpoint protection, IAM, and vulnerability management
  • Experience producing and presenting security reporting to board or executive audiences
  • Excellent written and verbal communication skills, able to explain risk clearly to non-technical stakeholders
  • Full driving licence and willingness to travel between client sites and islands

Desirable

  • Experience with regulated financial services firms and Channel Islands regulatory expectations (GFSC/JFSC)
  • CISSP, CISM, CISA, ISO 27001 Lead Implementer, or CompTIA Security+
  • MSP or MSSP background
  • Business continuity, data protection, or Cyber Essentials assessor experience
Apply